help, having problems authenticating user with LDAP

[Massimiliano Ritossa]

You missed the ';' after subtreeSearch="true" (or after the last attribute definition) in the login.config file.

  Massimiliano Ritossa
  Servizio Informatico SISSA - http://sis.sissa.it
  Via Bonomea 265, 34136 Trieste ITALY
  Ph: +39 040 3787 552

On Sep 19, 2011, at 3:44 PM, Leonard Kroll wrote:

> I am new to Shibboleth, and would appreciate any help.
> I have attached the Idp-process.log file, configuration files, and pasted the error here.
> When I attempt to login via the login page, I get the following error.
> Also, How do I get better logging during the login process?
>  
> Thanks in advance.
> ~lennyK
>  
> 09:12:57.489 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:169] - Storing LoginContext to StorageService partition loginContexts, key fb3c0833-5068-4485-babc-e47b30e2e94a
> 09:12:57.489 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginHandler:66] - Redirecting to https://vm-shibboleth.umassb.net:443/idp/Authn/UserPassword
> 09:12:57.580 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:134] - Redirecting to login page /login.jsp
> 09:13:06.808 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:154] - Attempting to authenticate user leonard.kroll
> 09:13:06.819 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:180] - User authentication for leonard.kroll failed
> java.lang.SecurityException: Configuration Error:
>       Line 14: expected [option key], found [null]
>       at com.sun.security.auth.login.ConfigFile.<init>(Unknown Source) ~[na:1.6.0_26]
>       at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.6.0_26]
>       at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source) ~[na:1.6.0_26]
>       at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source) ~[na:1.6.0_26]
>       at java.lang.reflect.Constructor.newInstance(Unknown Source) ~[na:1.6.0_26]
>       at java.lang.Class.newInstance0(Unknown Source) ~[na:1.6.0_26]
>       at java.lang.Class.newInstance(Unknown Source) ~[na:1.6.0_26]
>       at javax.security.auth.login.Configuration$3.run(Unknown Source) ~[na:1.6.0_26]
>       at java.security.AccessController.doPrivileged(Native Method) ~[na:1.6.0_26]
>       at javax.security.auth.login.Configuration.getConfiguration(Unknown Source) ~[na:1.6.0_26]
>       at javax.security.auth.login.LoginContext$1.run(Unknown Source) ~[na:1.6.0_26]
>       at java.security.AccessController.doPrivileged(Native Method) ~[na:1.6.0_26]
>       at javax.security.auth.login.LoginContext.init(Unknown Source) ~[na:1.6.0_26]
>       at javax.security.auth.login.LoginContext.<init>(Unknown Source) ~[na:1.6.0_26]
>       at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.authenticateUser(UsernamePasswordLoginServlet.java:158) [shibboleth-identityprovider-2.3.3.jar:na]
>       at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:107) [shibboleth-identityprovider-2.3.3.jar:na]
>       at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) [servlet-api.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) [catalina.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:na]
>       at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) [shibboleth-identityprovider-2.3.3.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:na]
>       at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81) [shibboleth-identityprovider-2.3.3.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:na]
>       at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.3.3.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:na]
>       at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:na]
>       at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219) [catalina.jar:na]
>       at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) [catalina.jar:na]
>       at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:na]
>       at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [catalina.jar:na]
>       at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [catalina.jar:na]
>       at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) [catalina.jar:na]
>       at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:852) [tomcat-coyote.jar:na]
>       at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588) [tomcat-coyote.jar:na]
>       at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) [tomcat-coyote.jar:na]
>       at java.lang.Thread.run(Unknown Source) [na:1.6.0_26]
> Caused by: java.io.IOException: Configuration Error:
>       Line 14: expected [option key], found [null]
>       at com.sun.security.auth.login.ConfigFile.match(Unknown Source) ~[na:1.6.0_26]
>       at com.sun.security.auth.login.ConfigFile.parseLoginEntry(Unknown Source) ~[na:1.6.0_26]
>       at com.sun.security.auth.login.ConfigFile.readConfig(Unknown Source) ~[na:1.6.0_26]
>       at com.sun.security.auth.login.ConfigFile.init(Unknown Source) ~[na:1.6.0_26]
>       at com.sun.security.auth.login.ConfigFile.init(Unknown Source) ~[na:1.6.0_26]
>       ... 38 common frames omitted
> 09:13:06.822 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:134] - Redirecting to login page /login.jsp
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
>  
> Leonard Kroll
> UNIX / GIS Administrator
> Univ. Massachusetts Boston
> Leonard(dot)Kroll(at)umb.edu
> Phone: 617-287-5048
> fax:      617-287-5224
>  
> <login.config><idp-process.log>--
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net